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End of...Sale/Marketing, Life, Service 


e End of Sale/Marketing (EOM) — When a company 
stops selling a product 


* End of Life (EOL) - When a company limits support 
for a product 


* End of Service (EOS) - When a company 
completely a product 


Note: Not every vendor uses the same terms or publishes 
every date 


Is the 


Beginning of Life 


For 


Use Case: EOS Software is no longer actively 
managed or patched by the vendors 


* Increases the chance that a vulnerability will be identified and 
exploited 


The WannaCry ransomware attack has 
spread to 150 countries 


New variations of the ransomware have begun to surface 


Windows 


Internet 
Explorer 


i South Korea victim of Internet Explorer zero- 
day vulnerability 


Research from Symantec has revealed that the Internet Explorer Scripting Engine Remote Memory Corruption 
Vulnerability was used in targeted attacks in South Korea. 
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Adobe Flash Shutdown Halts 
| Chinese Railroad for Over 16 Hours 
Before Pirated Copy Restores Ops E 
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Adobe Flash Trends at a Glance 
(Qualys Customer Summary) 


7 M i | | iO n eee WIN Adobe Flash 
Instances 

35% 29% 

Impacted Impacted 

Clients Assets 


21% 


Clients with Flash 
on a Server 


Use Case: Running afoul of Regulatory & 
Compliance rules and Security Audits 


CIs Fa Lad Sanit” FR) Fed RAM P 


All organizations must "Ensure that all system 
components and software are protected from known 
vulnerabilities by having the latest vendor-supplied 


H | PA A security patches installed." 


Health Insurance Portability 
and Accountability Act 


- PCI DSS section 6.1 


Security id 
Standards Council 
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Additional Use Cases 


* Harder to support; increases costs 


* Paying for maintenance with no 
benefit 


* Lack of Compatibility 


* Limited Performance & Scalability 


Solution - How to Manage EOL/EOS Software 


A Tk © 
Inventory & Identify Visualize Remediate 
Categorize 
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Challenges — Volume, Velocity, Variance 


High Volume High Variance 


nm CS 0 | © Acquisitions Skype > Microsoft 
A [=] Ogo Product Communicator > Lync > 


rebranding Skpe for Business > Teams 
Specs HW/OS Apps Config 
“A” means “B” lync.exe = Skype for Business 
] J i Name variance MSFT, Microsoft Corporation, 
Changing at High Velocity Microsoft, microsoft corp, … 


Published in different 
ways/locations by different vendors 


821 201 


Manufacturer Product 


EOL Sourcing 


You 'could' do this manually...but it would take forever! 


Inventory - Always up-to-date, real-time view 
of your Global IT Assets in a Hybrid IT 
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Qualys Global IT Asset Inventory 


Not your ordinary inventory tool. 


eN a 


Unlimited, continuous Normalization & Detailed asset 
discovery categorization information 


Q BUR 


META 


Powerful Advanced asset Dynamic tagging 
search information 
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Building a Comprehensive Asset Inventory 


Cloud Agent, 
Mobile Device 
Agent 


Network Scanner 


Cloud Connectors & 
Container Sensors 


Passive Sensor 


Identify - Qualys EOL/EOS Content & Process 


Content Sources Processes 


Continuous Content update via 
Automated Gap fill Process EOL/EOS 
Content 


Proactive Content update via » 
Key Vendor based Research : 


Address Client specific priorities 
with a UI based ticket process 


Seamless updates via Cloud Based 
Platform 


Complex vendor analysis via 
Expert Team of Researchers 


Automated, Scalable Process 
ensures complete coverage 


e Software : nearly 1,700 publishers and over 65,000 software releases 
* Hardware : over 100 hardware manufacturers and over 45,000 models © oars 


Visualize - Dashboards 


* 


Last 30 Days v (+) 


OPERATING SYSTEM DISTRIBUTION 


= Dynamic and customizable 
dashboards 


ASSET DISTRIBUTION BY GEOLOCATION 


Total 


3.64K view Global 


. : Urited Kingdom (10) 167 
= Pre-Defined views of P à Wins vs Wy Oo” fica UNS 


EOL/EOS data 
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© Unidentified 677 India (17) United States 130 


Network O.. 121 India 17 


B Unix 76 United Kingdom 10 
Japan 


Ireland 


CATEGORY BREAKDOWN 


lll Computers Virtualized i Others Networking Device WB Network Security Device 


Remediate - Update or remove the software 


Update to a supported version 


When still needed 
When under maintenance 


…using Qualys Patch Management 


Uninstall the Software 


When completely End of Service 
When not used 


Qualys Patch Management 


© A single solution to patch operating 
systems (OS) and third-party applications 


9 Cloud-based solution that 
is easy to deploy and use 


Remote patching for corporate 
and personal devices 


Automated correlation of 
vulnerabilities and patches 
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Extend your EOL Data Use 
With Qualys CMDB Synch for ServiceNow 


* Brings in EOL data for use by 
CMDB Users 


* Up-to-date, complete, structured, 
and enriched ServiceNow CMDB 


e Automatically maps to 
Configuration Item (Cl) Classes 


Quick Demo 


Client Session 
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Thanks for joining us! 


What's Next? 


Ask your TAM About 


Global Asset Inventory 
and our Enrichment Module 


or email Product Management at: 


erossi@qualys.com 


pquiroga@qualys.com 


© Qualys. 


